CVE-2026-70341: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Published Aug 28, 2026
·Updated
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Other sources
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
— Microsoft
Affected Software
13 affected componentsFixes available
Microsoft Microsoft Edge (Chromium-based)
Microsoft Edge<152.0.4191.53
Microsoft Edge for Android<152.0.4191.52
152.0.4191.52
Microsoft Edge for MAC<152.0.4191.52
152.0.4191.52
Microsoft Edge (Chromium-based)<152.0.4191.52
152.0.4191.52
Microsoft Edge for Linux<152.0.4191.52
152.0.4191.52
Microsoft Edge for iOS<152.0.4191.52
152.0.4191.52
All of the following
Microsoft Edge
Any of the following
Apple macOS
Linux Linux kernel
Microsoft Edge Android<152.0.4191.52
Microsoft Edge Iphone Os<152.0.4191.52
Microsoft Edge Chromium<152.0.4191.52
Remediation
Event History
Aug 28, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
Sep 11, 2026
CVE Published
via MITRE·03:50 PM
Data Sourced
via MITRE·03:50 PM
DescriptionSeverity
Data Sourced
via NVD·04:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must be authorized and have low privileges. Exploitation is possible over a network and does not require user interaction.
2
Which Edge platforms are listed as affected?
The affected software list includes Microsoft Edge (Chromium-based), Microsoft Edge, and Edge versions for iOS, macOS, Linux, and Android.
3
What is the potential impact if exploitation succeeds?
Successful exploitation can allow code execution and has high potential impact on confidentiality, integrity, and availability. The vulnerability is rated high severity with a CVSS score of 8.5.